SOC 2
SOC 2 is an audit reporting framework for assessing a service organization's controls against criteria set by the American Institute of CPAs.
SOC 2, short for System and Organization Controls 2, is an audit reporting framework in which an independent auditor assesses a service organization's controls against the American Institute of CPAs' Trust Services Criteria. Security is a common criterion; availability, processing integrity, confidentiality and privacy are included according to the report's scope.
SOC 2 reports are used to examine data-handling and access controls at cloud and AI service providers. The framework is distinct from certifications such as ISO 27001 and privacy laws such as the GDPR; SOC 2 is not itself a certification.
This entry is based on AIPOST articles and widely known facts. If something is wrong, please send us a correction request.
Articles covering this entry
Compliance frameworks such as SOC 2 also require human approval before code changes reach production.
Standard accounts do not have the stated SOC 2, ISO, or GDPR compliance assurances, and zero data retention is limited to enterprise accounts.